Comment 13 for bug 1928674

This also makes validation of grub changes substantially harder, as everything now needs to be verified 4 times (don't forget xenial ESM), and triples the number of binaries we have to sign, which is terrible.

There's a reason we went with a binary copy in the first place, instead of building grub2 in each release.